$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: 9roZnlW6RqSX5aqdHXTW375r09GUwcrNu12Bm2cp6mk= Subject key identifier: 9B:E4:81:DB:AB:78:63:2E:23:55:DD:35:93:AB:87:BF:AB:29:F4:DE Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0A1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 0A08 Signing time: Sun 24 Aug 2025 19:50:44 +0000 Manifest this update: Sun 24 Aug 2025 19:50:43 +0000 Manifest next update: Sun 31 Aug 2025 19:50:43 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: J8VTefC80Gv56KmL60X01j7K1NT8u2+PdQ+i6vE6ruQ=) 2: 7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (hash: unkzLsoSC8OhagJytTS2NwamPLpJq/uFvMRt2lZfV60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Aug 24 19:50:43 2025 GMT Not After : Aug 31 19:50:43 2025 GMT Subject: CN=68ab6d13-b617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bb:85:16:8f:92:5b:0e:3d:a3:a6:73:c1:b8: 12:22:1b:fd:9f:b5:f8:75:b1:1b:5a:0d:9a:83:3d: b6:30:3a:75:6e:b7:fc:6d:2c:10:35:7d:92:3d:c0: 4f:87:e7:a1:a1:00:c7:87:05:95:96:51:fe:6b:f5: 5a:07:70:09:7d:f3:fd:50:3c:75:76:3c:77:16:cc: 7b:3c:62:c4:a5:ac:00:91:e7:b1:ca:ca:fe:9f:a0: 30:04:53:2a:c0:a1:a8:fb:45:10:a2:bd:3a:56:b8: a7:5d:54:a1:42:5b:9b:ea:29:82:43:ce:e8:ae:fc: a5:fd:ad:19:25:fd:b1:e5:ca:76:f5:d3:cf:f3:1a: 28:c9:45:dd:6b:e0:b5:27:78:52:88:9d:01:7a:b0: 40:3e:b1:63:2f:84:39:97:df:da:d0:02:9c:2c:ad: a8:16:1d:d4:d1:f3:a3:e6:49:f1:54:7a:94:7a:36: 3c:2a:c1:6a:b0:c9:30:4d:dd:e2:8c:c2:72:82:11: d7:e7:83:72:7b:d1:ee:c9:d7:1b:52:12:b4:61:db: 43:3e:f0:a1:38:f0:0c:9d:fc:8e:9f:70:d0:70:19: c8:3c:0d:04:9f:30:19:02:38:86:b9:08:cc:02:40: 14:be:3e:c2:ed:6b:d5:eb:ab:dc:a0:38:29:a8:4a: 57:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E4:81:DB:AB:78:63:2E:23:55:DD:35:93:AB:87:BF:AB:29:F4:DE X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:69:a8:18:79:6f:04:fa:82:d2:24:13:c1:4d:c7:27:5c:81: a5:70:23:df:e2:51:9f:66:37:72:63:ee:89:ec:10:ef:b2:59: a0:c8:9e:e1:a9:11:cb:1e:02:fb:04:5a:93:a7:45:7b:1d:8e: 44:23:86:d6:66:cf:66:59:91:4f:d5:c8:71:64:6b:b7:99:3e: 50:8f:6a:8b:b8:61:88:bf:ff:ce:01:7e:11:5c:e2:e6:53:05: 5e:05:1e:71:d2:02:15:f2:d0:18:cb:1b:90:d1:8e:4f:33:c7: d6:d6:ae:c6:f2:73:98:89:a5:76:3a:1c:48:29:e6:4a:0a:b7: 5f:54:06:ea:b1:df:1b:cc:08:9c:a3:2b:4b:b4:bf:8d:a1:6b: 52:17:81:4a:d8:01:43:5a:f9:b0:2a:65:44:e1:f7:e2:9f:ea: 6a:75:2f:69:46:7b:bc:9a:2e:8b:5e:38:1f:06:96:11:93:72: 50:3a:15:2a:09:df:b4:47:9d:08:f6:b8:5d:5c:5b:f1:8c:5f: 35:e6:c6:94:d6:3c:4e:da:c5:db:ec:89:18:d7:e9:6b:9e:51: cb:b1:77:f6:1f:2e:d3:c9:59:40:6e:dd:6d:67:f1:a4:8d:5c: fa:64:f0:3a:82:07:d3:69:45:fe:8c:e7:dc:cf:3f:84:15:e5: 08:e3:ba:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUwODI0MTk1MDQzWhcNMjUwODMxMTk1MDQzWjAYMRYwFAYD VQQDEw02OGFiNmQxMy1iNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47uFFo+SWw49o6ZzwbgSIhv9n7X4dbEbWg2agz22MDp1brf8bSwQNX2SPcBP h+ehoQDHhwWVllH+a/VaB3AJffP9UDx1djx3Fsx7PGLEpawAkeexysr+n6AwBFMq wKGo+0UQor06VrinXVShQlub6imCQ87orvyl/a0ZJf2x5cp29dPP8xooyUXda+C1 J3hSiJ0BerBAPrFjL4Q5l9/a0AKcLK2oFh3U0fOj5knxVHqUejY8KsFqsMkwTd3i jMJyghHX54Nye9HuydcbUhK0YdtDPvChOPAMnfyOn3DQcBnIPA0EnzAZAjiGuQjM AkAUvj7C7WvV66vcoDgpqEpXBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvkgdur eGMuI1XdNZOrh7+rKfTeMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzaagYeW8E+oLSJBPBTccnXIGlcCPf4lGfZjdyY+6J7BDvslmgyJ7h qRHLHgL7BFqTp0V7HY5EI4bWZs9mWZFP1chxZGu3mT5Qj2qLuGGIv//OAX4RXOLm UwVeBR5x0gIV8tAYyxuQ0Y5PM8fW1q7G8nOYiaV2OhxIKeZKCrdfVAbqsd8bzAic oytLtL+NoWtSF4FK2AFDWvmwKmVE4ffin+pqdS9pRnu8mi6LXjgfBpYRk3JQOhUq Cd+0R50I9rhdXFvxjF815saU1jxO2sXb7IkY1+lrnlHLsXf2Hy7TyVlAbt1tZ/Gk jVz6ZPA6ggfTaUX+jOfczz+EFeUI47rf -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:26 2025 by rpki-client